It's true, I do remember the DROWN exploit relying upon keys presented over differing protocols. It doesn't take long to generate an RSA key, though. A dedicat

It's true, I do remember the DROWN exploit relying upon keys presented over differing protocols. It doesn't take long to generate an RSA key, though. A dedicated signing key would seem to be the obvious thing to do. https://en.wikipedia.org/wiki/DROWN_attack https://en.wikipedia.org/wiki/DROWN_attack